@frostbridge/imdl 0.1.7 → 0.1.9

package/dist/index.js

@@ -2688,7 +2688,7 @@ function resumeCommand() {
 import pc6 from "picocolors";
 
 // src/adapters/index.ts
-import { existsSync as existsSync18, readFileSync as readFileSync12, writeFileSync as writeFileSync6 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync13, writeFileSync as writeFileSync6 } from "fs";
 import { join as join17 } from "path";
 
 // src/transport/buffer.ts
@@ -3197,7 +3197,7 @@ var ClaudeCodeAdapter = class {
 };
 
 // src/adapters/cursor.ts
-import { existsSync as existsSync17, readdirSync as readdirSync4, statSync as statSync9 } from "fs";
+import { existsSync as existsSync17, readdirSync as readdirSync4, readFileSync as readFileSync12, statSync as statSync9 } from "fs";
 import { join as join16 } from "path";
 import { homedir as homedir13 } from "os";
 import { createRequire } from "module";
@@ -3579,6 +3579,97 @@ var CursorAdapter = class _CursorAdapter {
     }
     return `cursor-${parts[parts.length - 2] || "unknown"}`;
   }
+  /**
+   * Scan Cursor's agent-transcripts JSONL files (real-time, like Claude Code).
+   * Path: ~/.cursor/projects/{project}/agent-transcripts/{session}/{session}.jsonl
+   * Uses offsets to only read new lines since last scan.
+   */
+  extractFromTranscripts(since, offsets) {
+    const projectsDir = join16(homedir13(), ".cursor", "projects");
+    if (!existsSync17(projectsDir)) return { events: [], newOffsets: offsets };
+    const events = [];
+    const newOffsets = { ...offsets };
+    try {
+      const projects = readdirSync4(projectsDir);
+      for (const proj of projects) {
+        const transcriptsDir = join16(projectsDir, proj, "agent-transcripts");
+        if (!existsSync17(transcriptsDir)) continue;
+        let sessionDirs;
+        try {
+          sessionDirs = readdirSync4(transcriptsDir);
+        } catch {
+          continue;
+        }
+        for (const sessionDir of sessionDirs) {
+          const jsonlPath = join16(transcriptsDir, sessionDir, `${sessionDir}.jsonl`);
+          if (!existsSync17(jsonlPath)) continue;
+          if (since) {
+            try {
+              const stat = statSync9(jsonlPath);
+              if (stat.mtimeMs < since.getTime()) continue;
+            } catch {
+              continue;
+            }
+          }
+          try {
+            const content = readFileSync12(jsonlPath, "utf-8");
+            const lines = content.split("\n").filter((l) => l.trim());
+            const lastOffset = offsets[jsonlPath] || 0;
+            if (lines.length <= lastOffset) continue;
+            const newLines = lines.slice(lastOffset);
+            newOffsets[jsonlPath] = lines.length;
+            const projectPath = "/" + proj.replace(/-/g, "/").replace(/^\//, "");
+            const sid = `cursor-${sessionDir.slice(0, 8)}`;
+            const now = (/* @__PURE__ */ new Date()).toISOString();
+            for (const line of newLines) {
+              let entry;
+              try {
+                entry = JSON.parse(line);
+              } catch {
+                continue;
+              }
+              const content2 = entry.message?.content;
+              if (!Array.isArray(content2)) continue;
+              if (entry.role === "user") {
+                let text = "";
+                for (const block of content2) {
+                  if (block?.type === "text" && block.text) {
+                    text += block.text.replace(/<user_query>\n?/g, "").replace(/\n?<\/user_query>/g, "").trim();
+                  }
+                }
+                if (!text || this.isNoisePrompt(text)) continue;
+                events.push({
+                  sessionId: sid,
+                  type: "user_prompt",
+                  prompt: text.slice(0, 1e4),
+                  timestamp: now,
+                  cwd: projectPath,
+                  agentType: "cursor"
+                });
+              } else if (entry.role === "assistant") {
+                for (const block of content2) {
+                  if (block?.type === "tool_use" && block.name) {
+                    events.push({
+                      sessionId: sid,
+                      type: "pre_tool_use",
+                      toolName: block.name,
+                      toolInput: block.input || void 0,
+                      timestamp: now,
+                      cwd: projectPath,
+                      agentType: "cursor"
+                    });
+                  }
+                }
+              }
+            }
+          } catch {
+          }
+        }
+      }
+    } catch {
+    }
+    return { events, newOffsets };
+  }
   /**
    * Returns the workspace storage path for Cursor, or null if not found.
    */
@@ -3610,6 +3701,13 @@ var CursorAdapter = class _CursorAdapter {
       return [];
     }
   }
+  /**
+   * Returns the Cursor projects directory for transcript scanning.
+   */
+  static getProjectsDir() {
+    const dir = join16(homedir13(), ".cursor", "projects");
+    return existsSync17(dir) ? dir : null;
+  }
 };
 
 // src/adapters/index.ts
@@ -3617,7 +3715,7 @@ var STATE_FILE = join17(getImdlDir(), "adapter-state.json");
 function loadState() {
   try {
     if (existsSync18(STATE_FILE)) {
-      return JSON.parse(readFileSync12(STATE_FILE, "utf-8"));
+      return JSON.parse(readFileSync13(STATE_FILE, "utf-8"));
     }
   } catch {
   }
@@ -3698,9 +3796,38 @@ async function collectPrompts() {
       }
     }
   }
+  const cursorAdapter = new CursorAdapter();
+  if (CursorAdapter.getProjectsDir()) {
+    try {
+      const { events: transcriptEvents, newOffsets } = cursorAdapter.extractFromTranscripts(new Date(state.lastRun), state.offsets);
+      state.offsets = newOffsets;
+      for (const event of transcriptEvents) {
+        let violation;
+        if (event.prompt) {
+          const scan = scanPromptForSecrets(event.prompt);
+          if (scan.hasSecrets) {
+            violation = createPromptViolation(scan.findings);
+          }
+        }
+        const buffered = {
+          sessionId: event.sessionId,
+          type: event.type,
+          toolName: event.toolName,
+          toolInput: event.toolInput ? redactObject(event.toolInput) : void 0,
+          prompt: event.prompt ? redactObject(event.prompt) : void 0,
+          timestamp: event.timestamp,
+          cwd: event.cwd,
+          agentType: "cursor",
+          violation
+        };
+        appendEvent(buffered);
+        collected++;
+      }
+    } catch {
+    }
+  }
   const cursorWorkspaces = CursorAdapter.getAllWorkspaces();
   if (cursorWorkspaces.length > 0) {
-    const cursorAdapter = new CursorAdapter();
     for (const ws of cursorWorkspaces) {
       try {
         const events = await cursorAdapter.extractEvents({
@@ -3758,7 +3885,7 @@ async function collectCommand() {
 
 // src/commands/daemon.ts
 import pc7 from "picocolors";
-import { existsSync as existsSync19, readFileSync as readFileSync13, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync19, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
 import { join as join18 } from "path";
 var INTERVAL_MS = 3e4;
 async function daemonCommand() {
@@ -3783,7 +3910,7 @@ async function daemonCommand() {
 async function ingestShellEvents() {
   const shellLog = join18(getBufferDir(), "shell-events.ndjson");
   if (!existsSync19(shellLog)) return 0;
-  const content = readFileSync13(shellLog, "utf-8").trim();
+  const content = readFileSync14(shellLog, "utf-8").trim();
   if (!content) return 0;
   const config = loadConfig();
   const lines = content.split("\n");
@@ -3888,7 +4015,7 @@ async function requestCommand(options) {
 // src/commands/lock.ts
 import pc9 from "picocolors";
 import { createHash as createHash2 } from "crypto";
-import { readFileSync as readFileSync14, writeFileSync as writeFileSync8, existsSync as existsSync20 } from "fs";
+import { readFileSync as readFileSync15, writeFileSync as writeFileSync8, existsSync as existsSync20 } from "fs";
 import { join as join19, resolve as resolve3 } from "path";
 var LOCKFILE_NAME = "mcp-lock.json";
 function computeIntegrity(server, identity) {
@@ -3986,7 +4113,7 @@ async function verifyCommand(options) {
   }
   let lockfile;
   try {
-    lockfile = JSON.parse(readFileSync14(lockPath, "utf-8"));
+    lockfile = JSON.parse(readFileSync15(lockPath, "utf-8"));
   } catch {
     console.log(pc9.red("Failed to parse lockfile."));
     process.exit(1);
@@ -4395,7 +4522,7 @@ async function checkCompliance(developerId) {
 }
 
 // src/permissions/fixer.ts
-import { existsSync as existsSync21, readFileSync as readFileSync15, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
 import { join as join20 } from "path";
 import { homedir as homedir14 } from "os";
 function buildFixesFromChanges(changes) {
@@ -4413,7 +4540,7 @@ function buildFixForAgent(change, home) {
     const configPath = join20(home, ".claude", "settings.json");
     if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync16(configPath, "utf-8"));
       const tools = settings.allowedTools || [];
       if (category === "shell") {
         if (!tools.includes("Bash") && !tools.some((t) => t.startsWith("Bash("))) return null;
@@ -4444,7 +4571,7 @@ function buildFixForAgent(change, home) {
     const configPath = join20(home, ".cursor", "settings.json");
     if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync16(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && settings["cursor.composer.yoloMode"] === true) {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Disable YOLO mode" };
       }
@@ -4456,7 +4583,7 @@ function buildFixForAgent(change, home) {
     const configPath = join20(home, ".codex", "config.json");
     if (!existsSync21(configPath)) return null;
     try {
-      const config = JSON.parse(readFileSync15(configPath, "utf-8"));
+      const config = JSON.parse(readFileSync16(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && config.sandbox_mode === "full_auto") {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Switch to supervised mode" };
       }
@@ -4468,7 +4595,7 @@ function buildFixForAgent(change, home) {
     const configPath = join20(home, "Library", "Application Support", "Code", "User", "settings.json");
     if (!existsSync21(configPath)) return null;
     try {
-      const settings = JSON.parse(readFileSync15(configPath, "utf-8"));
+      const settings = JSON.parse(readFileSync16(configPath, "utf-8"));
       if ((category === "agentic_mode" || category === "shell") && (settings["github.copilot.chat.agent.autoApprove"] || settings["chat.agent.autoApprove"])) {
         return { agentType, category: "agentic_mode", currentGrant: "unrestricted", newGrant: "confirmation", configPath, description: "Disable autoApprove" };
       }
@@ -4481,7 +4608,7 @@ function buildFixForAgent(change, home) {
       const configPath = join20(home, ".windsurf", "mcp.json");
       if (!existsSync21(configPath)) return null;
       try {
-        const config = JSON.parse(readFileSync15(configPath, "utf-8"));
+        const config = JSON.parse(readFileSync16(configPath, "utf-8"));
         const servers = Object.keys(config.mcpServers || {});
         if (servers.length === 0) return null;
         return { agentType, category, currentGrant: "unrestricted", newGrant: "denied", configPath, description: `Remove MCP servers (${servers.join(", ")})` };
@@ -4494,7 +4621,7 @@ function buildFixForAgent(change, home) {
 }
 function applyFix(fix) {
   try {
-    const content = readFileSync15(fix.configPath, "utf-8");
+    const content = readFileSync16(fix.configPath, "utf-8");
     const config = JSON.parse(content);
     let modified = false;
     if (fix.agentType === "claude-code") {
@@ -4785,7 +4912,7 @@ function grantLevel(grant) {
 
 // src/commands/gateway.ts
 import pc12 from "picocolors";
-import { existsSync as existsSync22, readFileSync as readFileSync16, writeFileSync as writeFileSync10, mkdirSync as mkdirSync3 } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync17, writeFileSync as writeFileSync10, mkdirSync as mkdirSync3 } from "fs";
 import { join as join21 } from "path";
 import { homedir as homedir15 } from "os";
 import { execSync as execSync2, spawn } from "child_process";
@@ -4931,7 +5058,7 @@ async function gatewayAlertsCommand(opts) {
     console.log(pc12.dim("No alerts logged yet."));
     return;
   }
-  const lines = readFileSync16(logPath, "utf-8").split("\n").filter(Boolean);
+  const lines = readFileSync17(logPath, "utf-8").split("\n").filter(Boolean);
   const limit = opts.limit ? parseInt(opts.limit, 10) : 20;
   const recent = lines.slice(-limit);
   if (opts.json) {
@@ -5035,7 +5162,7 @@ async function getGatewayStatus() {
 function getRunningPid() {
   if (!existsSync22(GATEWAY_PID_FILE)) return null;
   try {
-    const pid = parseInt(readFileSync16(GATEWAY_PID_FILE, "utf-8").trim(), 10);
+    const pid = parseInt(readFileSync17(GATEWAY_PID_FILE, "utf-8").trim(), 10);
     return isNaN(pid) ? null : pid;
   } catch {
     return null;
@@ -5052,7 +5179,7 @@ function isProcessAlive(pid) {
 function getConfiguredPort() {
   if (!existsSync22(GATEWAY_CONFIG)) return DEFAULT_PORT;
   try {
-    const content = readFileSync16(GATEWAY_CONFIG, "utf-8");
+    const content = readFileSync17(GATEWAY_CONFIG, "utf-8");
     const match = content.match(/listen_port\s*=\s*(\d+)/);
     return match ? parseInt(match[1], 10) : DEFAULT_PORT;
   } catch {
@@ -5124,7 +5251,7 @@ function loadGatewayToml() {
   if (!existsSync22(GATEWAY_CONFIG)) {
     ensureConfig(DEFAULT_PORT);
   }
-  return readFileSync16(GATEWAY_CONFIG, "utf-8");
+  return readFileSync17(GATEWAY_CONFIG, "utf-8");
 }
 function saveGatewayToml(content) {
   writeFileSync10(GATEWAY_CONFIG, content, { mode: 384 });
@@ -5457,7 +5584,7 @@ function ruleTypeToCategory(type) {
 }
 
 // src/transport/sync.ts
-import { readFileSync as readFileSync17, writeFileSync as writeFileSync11, existsSync as existsSync23 } from "fs";
+import { readFileSync as readFileSync18, writeFileSync as writeFileSync11, existsSync as existsSync23 } from "fs";
 import { join as join22 } from "path";
 var SYNC_INTERVAL = 6e4;
 var SYNC_TIMEOUT = 3e3;
@@ -5468,7 +5595,7 @@ function getLastSyncTime() {
   try {
     const file = getSyncStateFile();
     if (existsSync23(file)) {
-      const data = JSON.parse(readFileSync17(file, "utf-8"));
+      const data = JSON.parse(readFileSync18(file, "utf-8"));
       return data.lastSync || 0;
     }
   } catch {

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "restricted"
   },
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "IMDL — Intelligent Mediation & Detection Layer. AI agent security CLI.",
   "files": [
     "dist"